This policy explains how Pidge (operated by Arete Technologies LLC, “Pidge”, “we”) handles personal information in the Pidge Rewards app, on hellopidge.com, and in the Pidge dashboard used by participating businesses (“shops”). We keep it short on purpose: we collect what a loyalty card needs, and nothing for advertising.
What we collect
| Data | Where it comes from | Why |
|---|---|---|
| Email address | You, when you sign in with an email code or Sign in with Apple | Your account, sign-in codes, account notices |
| Name | You (or Apple, the first time you use Sign in with Apple) | So shop staff can greet you; shops see first name + last initial |
| Birthday (month and day, optional) | You, if you add it | Birthday treats from shops you’ve joined |
| Phone number (optional) | You, if you add it | Offers by WhatsApp or SMS from shops you’ve said yes to, and matching your purchases at a shop that connects its point-of-sale system; managers and owners of shops you’ve joined can see it |
| Whether your number is on WhatsApp (optional) | You, if you say so | So shops only offer WhatsApp when you use it |
| Your offer choices for each shop (email, WhatsApp, SMS), with when and where you made each change | You, when you join a shop or later on its card | So a shop only sends offers the way you agreed, and can show when you said yes or no |
| Visits and purchase amounts | The shops you visit, through their staff (Counter mode), their point-of-sale system or the Pidge API | Earning stamps or points, unlocking rewards, tiers and streaks |
| Rewards and messages | Created as you earn and as shops send Carrier messages | Your wallet and inbox |
| Push notification token | Your device, if you allow notifications | Reward alerts and messages from shops you’ve joined |
| “Your usual” notes | Shop staff | So the barista remembers your order |
| Basic technical logs | Our servers | Security, fraud prevention and keeping the service running |
| How you use the app and website: screens and pages you open, what you tap or click, your device and app version, crash reports, and recordings of the screen while you use Pidge (what you type is hidden, and so is your member QR code) | The app and website, through our analytics provider | Finding bugs and seeing which parts of Pidge to improve |
We don’t collect your location, contacts, photos or payment card numbers in the app, and we don’t use advertising identifiers. We don’t track you across other companies’ apps or websites, and we don’t sell or rent personal information.
If you use the web pass at hellopidge.com/pass instead of the app, your browser keeps your sign-in session in its local storage so you stay signed in. The website also sets a first-party analytics cookie so we can tell one visit from the next. We don’t use advertising cookies.
If you add a shop card to Apple Wallet or Google Wallet, the card holds your display name, your balance and rewards at that shop, and a code for the counter. Apple or Google keeps it on your device (Google also in your Google account) under their own privacy policies. To keep the card current, we store an identifier for each device that holds it and send update notices through Apple Push Notification service or the Google Wallet API. Remove the card from Wallet to stop updates; deleting your Pidge account voids your cards.
What shops can see
Each shop sees only its own relationship with you: your display name (first name and last initial), your tier, balance, visits and purchase amounts at that shop, rewards from that shop, and the email on your account when staff look you up. The shop’s managers and owners also see your phone number, whether it’s on WhatsApp, and the offer choices you made for that shop; counter staff don’t. A shop never sees which other Pidge shops you visit, your choices for them, or anything you do there. Offers are off for every shop until you turn them on, and you can turn them off again at any time on that shop’s card.
Who we share data with
We use a small set of service providers who process data on our behalf, under contract:
- Convex (database and backend hosting)
- Cloudflare (website hosting, security, and sign-in and account emails)
- Expo and Apple Push Notification service (push notifications)
- Apple and Google, only if you add a card to Apple Wallet or Google Wallet (the card and its updates)
- Stripe (subscription billing for businesses, not members)
- PostHog (product analytics, screen recordings and crash reports for the app and website)
- A shop’s point-of-sale provider, only when that shop connects it, to match a payment at that shop to your Pidge account by email or phone
We may also disclose information if the law requires it, or to protect the safety of our users or the integrity of the service.
How long we keep it
We keep your account data while your account is open. When you delete your account, we remove your identity and personal data (name, email, phone number, birthday, push tokens and messages) and end every offer choice you made. The record of when you said yes or no stays, with nothing that identifies you. Shops keep anonymized visit counts so their totals stay correct, with nothing that identifies you. Backups roll off within 30 days.
Deleting your account
In Pidge Rewards, open the Me tab and tap Delete account. Deletion is immediate and can’t be undone. If you can’t access the app, email privacy@hellopidge.com from the address on your account and we’ll delete it for you.
Your choices and rights
- Edit your name, birthday and phone number in the app or on the web pass at any time.
- Say yes or no to offers by email, WhatsApp or SMS for each shop, on that shop’s card.
- Mute any shop’s messages, or turn notifications off in your device settings.
- Ask for a copy of your data, a correction or deletion by emailing privacy@hellopidge.com. Depending on where you live (for example the EU, UK or California) you may have additional rights, including to object or to complain to a regulator.
Businesses using Pidge
For owners and staff, we process your email, name, role and actions in the dashboard (kept in an audit log) to run the service, and billing details through Stripe. If an owner gives a phone number at setup or in Settings, the Pidge team uses it to reach them about their shop. For member data, the shop decides how its program works and Pidge processes that data on its behalf as described in our Data Processing Addendum.
Children
Pidge isn’t directed to children under 13 and we don’t knowingly collect their personal information. If you think a child has given us data, contact us and we’ll delete it.
Security and transfers
Data is encrypted in transit, sign-in codes are stored hashed, member QR codes rotate so screenshots can’t be reused, and staff access is limited by role. Our providers may process data in the United States and other countries, with appropriate safeguards.
Changes
If we make material changes we’ll update this page and tell you in the app or by email before they take effect.
Contact
Privacy questions: privacy@hellopidge.com. Everything else: support@hellopidge.com.